CheckPoint 156-915.80 Online Practice Questions and Exam Preparation

CheckPoint 156-915.80 Online Questions & Answers

• Question 351:

  In a ClusterXL high-availability environment, what MAC address will answer for Virtual IP in the default configuration?

  A. MAC address of Active Member
  B. Virtual MAC Address
  C. MAC Address of Standby Member
  D. MAC Address of Management Server
  A. MAC address of Active Member

• Question 352:

  How many images are included with Check Point TE appliance in Recommended Mode?

  A. 2 (OS) images
  B. Images are chosen by administrator during installation
  C. as many as licensed for
  D. the most new image
  A. 2 (OS) images

• Question 353:

  Which one of the following is true about Threat Emulation?

  A. Takes less than a second to complete
  B. Works on MS Office and PDF files only
  C. Always delivers a file
  D. Takes minutes to complete (less than 3 minutes)
  D. Takes minutes to complete (less than 3 minutes)

• Question 354:

  In R80, where do you manage your Mobile Access Policy?

  A. Access Control Policy
  B. Through the Mobile Console
  C. Shared Gateways Policy
  D. From the Dedicated Mobility Tab
  A. Access Control Policy

• Question 355:

  What are the methods of SandBlast Threat Emulation deployment?

  A. Cloud, Appliance and Private
  B. Cloud, Appliance and Hybrid
  C. Cloud, Smart-1 and Hybrid
  D. Cloud, OpenServer and VMware
  A. Cloud, Appliance and Private

• Question 356:

  When do modifications to the Event Policy take effect?

  A. As soon as the Policy Tab window is closed.
  B. When saved on the SmartEvent Server and installed to the Correlation Units.
  C. When saved on the Correlation Units, and pushed as a policy.
  D. When saved on the SmartEvent Client, and installed on the SmartEvent Server.
  B. When saved on the SmartEvent Server and installed to the Correlation Units.

• Question 357:

  Your customer, Mr. Smith needs access to other networks and should be able to use all services. Session authentication is not suitable. You select Client Authentication with HTTP. The standard authentication port for client HTTP authentication (Port 900) is already in use. You want to use Port 9001 but are having connectivity problems. Why are you having problems?

  

  A. The configuration file $FWDIR/conf/fwauthd.conf is incorrect.
  B. The Security Policy is not correct.
  C. You can't use any port other than the standard port 900 for Client Authentication via HTTP.
  D. The service FW_clntauth_http configuration is incorrect.
  A. The configuration file $FWDIR/conf/fwauthd.conf is incorrect.

• Question 358:

  What SmartEvent component creates events?

  A. Consolidation Policy
  B. Correlation Unit
  C. SmartEvent Policy
  D. SmartEvent GUI
  B. Correlation Unit

• Question 359:

  Type the full fw command and syntax that will show full synchronization status.

  fw ctl pstat

• Question 360:

  Your main internal network 10.10.10.0/24 allows all traffic to the Internet using Hide NAT. You also have a small network 10.10.20.0/24 behind the internal router. You want to configure the kernel to translate the source address only when network 10.10.20.0 tries to access the Internet for HTTP, SMTP, and FTP services. Which of the following configurations will allow this network to access the Internet?

  A. Configure three Manual Static NAT rules for network 10.10.20.0/24, one for each service.
  B. Configure Automatic Static NAT on network 10.10.20.0/24.
  C. Configure one Manual Hide NAT rule for HTTP, FTP, and SMTP services for network 10.10.20.0/24.
  D. Configure Automatic Hide NAT on network 10.10.20.0/24 and then edit the Service column in the NAT Rule Base on the automatic rule.
  C. Configure one Manual Hide NAT rule for HTTP, FTP, and SMTP services for network 10.10.20.0/24.